[xwiki-users] XE 3.0 Kerberos Implementation Issue

Hi all, We are testing XE 3.0 (actually Milestone3) with Kerberos Authentication (JIRA#2496 <http://jira.xwiki.org/jira/browse/XWIKI-2496>). Everything work fine except one function in the XE GUI. When I want to edit parent of a page, I just type "TEST" and I get a pop-up (named "XWiki") asking me for username and password. I use my Kerberos login but XE shows me an error at the bottom of the page: Failed to retrieve suggestions : ')Authorization Required... In reality, XWiki is trying an authentication with no user (kerb_authenticate_user entered with user (NULL)): _/var/log/apache2/access.log:_ 192.168.3.29 - - [25/Mar/2011:09:41:03 +0100] "GET /xwiki/rest/wikis/xwiki/search?scope=name&number=10&media=json&q=TEST HTTP/1.1" 401 617 "http://xe.domain.local/xwiki/bin/edit/XWiki_Home/WebHome?&editor=wiki" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:2.0) Gecko/20100101 Firefox/4.0" 192.168.3.29 - bpujos(a)DOMAIN.LOCAL [25/Mar/2011:09:41:03 +0100] "GET /xwiki/rest/wikis/xwiki/search?scope=name&number=10&media=json&q=TEST HTTP/1.1" 401 837 "http://xe.domain.local/xwiki/bin/edit/XWiki_Home/WebHome?&editor=wiki" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:2.0) Gecko/20100101 Firefox/4.0" 192.168.3.29 - - [25/Mar/2011:09:41:03 +0100] "GET /xwiki/rest/wikis/xwiki/search?scope=name&number=10&media=json&q=TEST HTTP/1.1" 401 587 "http://xe.domain.local/xwiki/bin/edit/XWiki_Home/WebHome?&editor=wiki" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:2.0) Gecko/20100101 Firefox/4.0" 192.168.3.29 - - [25/Mar/2011:09:41:08 +0100] "POST /xwiki/bin/edit/XWiki_Home/ HTTP/1.1" 401 616 "http://xe.domain.local/xwiki/bin/edit/XWiki_Home/WebHome?&editor=wiki" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:2.0) Gecko/20100101 Firefox/4.0" 192.168.3.29 - - [25/Mar/2011:09:41:08 +0100] "POST /xwiki/bin/edit/XWiki_Home/ HTTP/1.1" 401 616 "http://xe.domain.local/xwiki/bin/edit/XWiki_Home/WebHome?&editor=wiki" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:2.0) Gecko/20100101 Firefox/4.0" 192.168.3.29 - bpujos(a)DOMAIN.LOCAL [25/Mar/2011:09:41:08 +0100] "POST /xwiki/bin/edit/XWiki_Home/ HTTP/1.1" 200 728 "http://xe.domain.local/xwiki/bin/edit/XWiki_Home/WebHome?&editor=wiki" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:2.0) Gecko/20100101 Firefox/4.0" 192.168.3.29 - bpujos(a)DOMAIN.LOCAL [25/Mar/2011:09:41:08 +0100] "POST /xwiki/bin/edit/XWiki_Home/ HTTP/1.1" 200 727 "http://xe.domain.local/xwiki/bin/edit/XWiki_Home/WebHome?&editor=wiki" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:2.0) Gecko/20100101 Firefox/4.0" _/var/log/apache2/error.log (level: debug):_ [Fri Mar 25 09:41:03 2011] [debug] src/mod_auth_kerb.c(1579): [client 192.168.3.29] kerb_authenticate_user entered with user (NULL) and auth_type Kerberos, referer: http://xe.domain.local/xwiki/bin/edit/XWiki_Home/WebHome?&editor=wiki [Fri Mar 25 09:41:03 2011] [debug] mod_deflate.c(615): [client 192.168.3.29] Zlib: Compressed 479 to 324 : URL /xwiki/rest/wikis/xwiki/search, referer: http://xe.domain.local/xwiki/bin/edit/XWiki_Home/WebHome?&editor=wiki [Fri Mar 25 09:41:03 2011] [debug] src/mod_auth_kerb.c(1579): [client 192.168.3.29] kerb_authenticate_user entered with user (NULL) and auth_type Kerberos, referer: http://xe.domain.local/xwiki/bin/edit/XWiki_Home/WebHome?&editor=wiki [Fri Mar 25 09:41:03 2011] [debug] src/mod_auth_kerb.c(1261): [client 192.168.3.29] Acquiring creds for HTTP/xe.domain.local, referer: http://xe.domain.local/xwiki/bin/edit/XWiki_Home/WebHome?&editor=wiki [Fri Mar 25 09:41:03 2011] [debug] src/mod_auth_kerb.c(1407): [client 192.168.3.29] Verifying client data using KRB5 GSS-API, referer: http://xe.domain.local/xwiki/bin/edit/XWiki_Home/WebHome?&editor=wiki [Fri Mar 25 09:41:03 2011] [debug] src/mod_auth_kerb.c(1423): [client 192.168.3.29] Verification returned code 0, referer: http://xe.domain.local/xwiki/bin/edit/XWiki_Home/WebHome?&editor=wiki [Fri Mar 25 09:41:03 2011] [debug] src/mod_auth_kerb.c(1441): [client 192.168.3.29] GSS-API token of length 163 bytes will be sent back, referer: http://xe.domain.local/xwiki/bin/edit/XWiki_Home/WebHome?&editor=wiki [Fri Mar 25 09:41:03 2011] [debug] mod_proxy_ajp.c(45): proxy: AJP: canonicalising URL //localhost:8009/xwiki/rest/wikis/xwiki/search [Fri Mar 25 09:41:03 2011] [debug] proxy_util.c(1494): [client 192.168.3.29] proxy: ajp: found worker ajp://localhost:8009/xwiki for ajp://localhost:8009/xwiki/rest/wikis/xwiki/search?scope=name&number=10&media=json&q=TEST, referer: http://xe.domain.local/xwiki/bin/edit/XWiki_Home/WebHome?&editor=wiki [Fri Mar 25 09:41:03 2011] [debug] mod_proxy.c(993): Running scheme ajp handler (attempt 0) [Fri Mar 25 09:41:03 2011] [debug] mod_proxy_ajp.c(644): proxy: AJP: serving URL ajp://localhost:8009/xwiki/rest/wikis/xwiki/search?scope=name&number=10&media=json&q=TEST [Fri Mar 25 09:41:03 2011] [debug] proxy_util.c(1999): proxy: AJP: has acquired connection for (localhost) [Fri Mar 25 09:41:03 2011] [debug] proxy_util.c(2055): proxy: connecting ajp://localhost:8009/xwiki/rest/wikis/xwiki/search?scope=name&number=10&media=json&q=TEST to localhost:8009 [Fri Mar 25 09:41:03 2011] [debug] proxy_util.c(2153): proxy: connected /xwiki/rest/wikis/xwiki/search?scope=name&number=10&media=json&q=TEST to localhost:8009 [Fri Mar 25 09:41:03 2011] [debug] ajp_header.c(224): Into ajp_marshal_into_msgb [Fri Mar 25 09:41:03 2011] [debug] ajp_header.c(290): ajp_marshal_into_msgb: Header[0] [Host] = [xe.domain.local] [Fri Mar 25 09:41:03 2011] [debug] ajp_header.c(290): ajp_marshal_into_msgb: Header[1] [User-Agent] = [Mozilla/5.0 (Windows NT 6.1; WOW64; rv:2.0) Gecko/20100101 Firefox/4.0] [Fri Mar 25 09:41:03 2011] [debug] ajp_header.c(290): ajp_marshal_into_msgb: Header[2] [Accept] = [application/json] [Fri Mar 25 09:41:03 2011] [debug] ajp_header.c(290): ajp_marshal_into_msgb: Header[3] [Accept-Language] = [en-US,en;q=0.9,fr-FR;q=0.9,fr;q=0.8,ja-JP;q=0.8,ja;q=0.7,it-IT;q=0.6,it;q=0.6,fr-standard;q=0.5,en-gb;q=0.5,de-DE;q=0.4,de;q=0.4,fre-FR;q=0.3,fre;q=0.2,fr-fr;q=0.2,en-us;q=0.1,en;q=0.1] [Fri Mar 25 09:41:03 2011] [debug] ajp_header.c(290): ajp_marshal_into_msgb: Header[4] [Accept-Encoding] = [gzip, deflate] [Fri Mar 25 09:41:03 2011] [debug] ajp_header.c(290): ajp_marshal_into_msgb: Header[5] [Accept-Charset] = [ISO-8859-1,utf-8;q=0.7,*;q=0.7] [Fri Mar 25 09:41:03 2011] [debug] ajp_header.c(290): ajp_marshal_into_msgb: Header[6] [Keep-Alive] = [115] [Fri Mar 25 09:41:03 2011] [debug] ajp_header.c(290): ajp_marshal_into_msgb: Header[7] [DNT] = [1] [Fri Mar 25 09:41:03 2011] [debug] ajp_header.c(290): ajp_marshal_into_msgb: Header[8] [Connection] = [keep-alive] [Fri Mar 25 09:41:03 2011] [debug] ajp_header.c(290): ajp_marshal_into_msgb: Header[9] [X-Requested-With] = [XMLHttpRequest] [Fri Mar 25 09:41:03 2011] [debug] ajp_header.c(290): ajp_marshal_into_msgb: Header[10] [X-Prototype-Version] = [1.6.1] [Fri Mar 25 09:41:03 2011] [debug] ajp_header.c(290): ajp_marshal_into_msgb: Header[11] [Referer] = [http://xe.domain.local/xwiki/bin/edit/XWiki_Home/WebHome?&editor=wiki] [Fri Mar 25 09:41:03 2011] [debug] ajp_header.c(290): ajp_marshal_into_msgb: Header[12] [Cookie] = [JSESSIONID=8B30FAC10138C054309A6D4280E2B06C; username="DcUpQnOSCfOfd9rPB/ycMw__"; password="UFR3uU3Rb94_"; rememberme="false"; validation="fc9aa2a58df2b62d707e6dceb8c883fa"; language=fr; visitid=AGLVKWGPJLGLWQWTEZDT1ASZULAPGRFX] [Fri Mar 25 09:41:03 2011] [debug] ajp_header.c(290): ajp_marshal_into_msgb: Header[13] [Authorization] = [Negotiate xxxxxxxxxxxxx] [Fri Mar 25 09:41:03 2011] [debug] ajp_header.c(450): ajp_marshal_into_msgb: Done _/var/log/tomcat6/catalina.out:_ INFO:2011-03-25 09:41:03 192.168.3.29 - - 80 GET /xwiki/rest/wikis/xwiki/search scope=name&number=10&q=TEST 401 12 - 1 http://xe.domain.local Mozilla/5.0 (Windows NT 6.1; WOW64; rv:2.0) Gecko/20100101 Firefox/4.0 http://xe.domain.local/xwiki/bin/edit/XWiki_Home/WebHome?&editor=wiki I don't understand where is the problem... WDYT? Thanks, -- ---- Bertrand PUJOS bertrand.pujos(a)ircad.fr